summaryrefslogtreecommitdiff
path: root/nacl/crypto_hashblocks
diff options
context:
space:
mode:
authorirungentoo <irungentoo@gmail.com>2013-07-02 09:53:34 -0400
committerirungentoo <irungentoo@gmail.com>2013-07-02 09:53:34 -0400
commite2967396ac73cb7410787886cdaf072a184ffc49 (patch)
tree527a74d25a4a0705fc641994fd35bfab22662034 /nacl/crypto_hashblocks
parent8928c817df345f29aa0b194743595aa11bd6a8ba (diff)
Added NaCl crypto library.
Diffstat (limited to 'nacl/crypto_hashblocks')
-rw-r--r--nacl/crypto_hashblocks/measure.c18
-rw-r--r--nacl/crypto_hashblocks/sha256/checksum1
-rw-r--r--nacl/crypto_hashblocks/sha256/inplace/api.h2
-rw-r--r--nacl/crypto_hashblocks/sha256/inplace/blocks.c228
-rw-r--r--nacl/crypto_hashblocks/sha256/inplace/implementors1
-rw-r--r--nacl/crypto_hashblocks/sha256/ref/api.h2
-rw-r--r--nacl/crypto_hashblocks/sha256/ref/blocks.c212
-rw-r--r--nacl/crypto_hashblocks/sha256/ref/implementors1
-rw-r--r--nacl/crypto_hashblocks/sha256/used0
-rw-r--r--nacl/crypto_hashblocks/sha512/checksum1
-rw-r--r--nacl/crypto_hashblocks/sha512/inplace/api.h2
-rw-r--r--nacl/crypto_hashblocks/sha512/inplace/blocks.c256
-rw-r--r--nacl/crypto_hashblocks/sha512/inplace/implementors1
-rw-r--r--nacl/crypto_hashblocks/sha512/ref/api.h2
-rw-r--r--nacl/crypto_hashblocks/sha512/ref/blocks.c239
-rw-r--r--nacl/crypto_hashblocks/sha512/ref/implementors1
-rw-r--r--nacl/crypto_hashblocks/sha512/selected0
-rw-r--r--nacl/crypto_hashblocks/sha512/used0
-rw-r--r--nacl/crypto_hashblocks/try.c79
-rw-r--r--nacl/crypto_hashblocks/wrapper-empty.cpp0
20 files changed, 1046 insertions, 0 deletions
diff --git a/nacl/crypto_hashblocks/measure.c b/nacl/crypto_hashblocks/measure.c
new file mode 100644
index 00000000..145fbbc4
--- /dev/null
+++ b/nacl/crypto_hashblocks/measure.c
@@ -0,0 +1,18 @@
1#include "crypto_hashblocks.h"
2
3const char *primitiveimplementation = crypto_hashblocks_IMPLEMENTATION;
4const char *implementationversion = crypto_hashblocks_VERSION;
5const char *sizenames[] = { "statebytes", 0 };
6const long long sizes[] = { crypto_hashblocks_STATEBYTES };
7
8void preallocate(void)
9{
10}
11
12void allocate(void)
13{
14}
15
16void measure(void)
17{
18}
diff --git a/nacl/crypto_hashblocks/sha256/checksum b/nacl/crypto_hashblocks/sha256/checksum
new file mode 100644
index 00000000..edde1d4f
--- /dev/null
+++ b/nacl/crypto_hashblocks/sha256/checksum
@@ -0,0 +1 @@
69a9dc2464f9593161e462d3dbb634b84f1d68d67d26df29aaa805f9dcd8f656
diff --git a/nacl/crypto_hashblocks/sha256/inplace/api.h b/nacl/crypto_hashblocks/sha256/inplace/api.h
new file mode 100644
index 00000000..005a4f47
--- /dev/null
+++ b/nacl/crypto_hashblocks/sha256/inplace/api.h
@@ -0,0 +1,2 @@
1#define CRYPTO_STATEBYTES 32
2#define CRYPTO_BLOCKBYTES 64
diff --git a/nacl/crypto_hashblocks/sha256/inplace/blocks.c b/nacl/crypto_hashblocks/sha256/inplace/blocks.c
new file mode 100644
index 00000000..4a191501
--- /dev/null
+++ b/nacl/crypto_hashblocks/sha256/inplace/blocks.c
@@ -0,0 +1,228 @@
1#include "crypto_hashblocks.h"
2
3typedef unsigned int uint32;
4
5static uint32 load_bigendian(const unsigned char *x)
6{
7 return
8 (uint32) (x[3]) \
9 | (((uint32) (x[2])) << 8) \
10 | (((uint32) (x[1])) << 16) \
11 | (((uint32) (x[0])) << 24)
12 ;
13}
14
15static void store_bigendian(unsigned char *x,uint32 u)
16{
17 x[3] = u; u >>= 8;
18 x[2] = u; u >>= 8;
19 x[1] = u; u >>= 8;
20 x[0] = u;
21}
22
23#define SHR(x,c) ((x) >> (c))
24#define ROTR(x,c) (((x) >> (c)) | ((x) << (32 - (c))))
25
26#define Ch(x,y,z) ((x & y) ^ (~x & z))
27#define Maj(x,y,z) ((x & y) ^ (x & z) ^ (y & z))
28#define Sigma0(x) (ROTR(x, 2) ^ ROTR(x,13) ^ ROTR(x,22))
29#define Sigma1(x) (ROTR(x, 6) ^ ROTR(x,11) ^ ROTR(x,25))
30#define sigma0(x) (ROTR(x, 7) ^ ROTR(x,18) ^ SHR(x, 3))
31#define sigma1(x) (ROTR(x,17) ^ ROTR(x,19) ^ SHR(x,10))
32
33#define M(w0,w14,w9,w1) w0 += sigma1(w14) + w9 + sigma0(w1);
34
35#define EXPAND \
36 M(w0 ,w14,w9 ,w1 ) \
37 M(w1 ,w15,w10,w2 ) \
38 M(w2 ,w0 ,w11,w3 ) \
39 M(w3 ,w1 ,w12,w4 ) \
40 M(w4 ,w2 ,w13,w5 ) \
41 M(w5 ,w3 ,w14,w6 ) \
42 M(w6 ,w4 ,w15,w7 ) \
43 M(w7 ,w5 ,w0 ,w8 ) \
44 M(w8 ,w6 ,w1 ,w9 ) \
45 M(w9 ,w7 ,w2 ,w10) \
46 M(w10,w8 ,w3 ,w11) \
47 M(w11,w9 ,w4 ,w12) \
48 M(w12,w10,w5 ,w13) \
49 M(w13,w11,w6 ,w14) \
50 M(w14,w12,w7 ,w15) \
51 M(w15,w13,w8 ,w0 )
52
53#define F(r0,r1,r2,r3,r4,r5,r6,r7,w,k) \
54 r7 += Sigma1(r4) + Ch(r4,r5,r6) + k + w; \
55 r3 += r7; \
56 r7 += Sigma0(r0) + Maj(r0,r1,r2);
57
58#define G(r0,r1,r2,r3,r4,r5,r6,r7,i) \
59 F(r0,r1,r2,r3,r4,r5,r6,r7,w0 ,round[i + 0]) \
60 F(r7,r0,r1,r2,r3,r4,r5,r6,w1 ,round[i + 1]) \
61 F(r6,r7,r0,r1,r2,r3,r4,r5,w2 ,round[i + 2]) \
62 F(r5,r6,r7,r0,r1,r2,r3,r4,w3 ,round[i + 3]) \
63 F(r4,r5,r6,r7,r0,r1,r2,r3,w4 ,round[i + 4]) \
64 F(r3,r4,r5,r6,r7,r0,r1,r2,w5 ,round[i + 5]) \
65 F(r2,r3,r4,r5,r6,r7,r0,r1,w6 ,round[i + 6]) \
66 F(r1,r2,r3,r4,r5,r6,r7,r0,w7 ,round[i + 7]) \
67 F(r0,r1,r2,r3,r4,r5,r6,r7,w8 ,round[i + 8]) \
68 F(r7,r0,r1,r2,r3,r4,r5,r6,w9 ,round[i + 9]) \
69 F(r6,r7,r0,r1,r2,r3,r4,r5,w10,round[i + 10]) \
70 F(r5,r6,r7,r0,r1,r2,r3,r4,w11,round[i + 11]) \
71 F(r4,r5,r6,r7,r0,r1,r2,r3,w12,round[i + 12]) \
72 F(r3,r4,r5,r6,r7,r0,r1,r2,w13,round[i + 13]) \
73 F(r2,r3,r4,r5,r6,r7,r0,r1,w14,round[i + 14]) \
74 F(r1,r2,r3,r4,r5,r6,r7,r0,w15,round[i + 15])
75
76static const uint32 round[64] = {
77 0x428a2f98
78, 0x71374491
79, 0xb5c0fbcf
80, 0xe9b5dba5
81, 0x3956c25b
82, 0x59f111f1
83, 0x923f82a4
84, 0xab1c5ed5
85, 0xd807aa98
86, 0x12835b01
87, 0x243185be
88, 0x550c7dc3
89, 0x72be5d74
90, 0x80deb1fe
91, 0x9bdc06a7
92, 0xc19bf174
93, 0xe49b69c1
94, 0xefbe4786
95, 0x0fc19dc6
96, 0x240ca1cc
97, 0x2de92c6f
98, 0x4a7484aa
99, 0x5cb0a9dc
100, 0x76f988da
101, 0x983e5152
102, 0xa831c66d
103, 0xb00327c8
104, 0xbf597fc7
105, 0xc6e00bf3
106, 0xd5a79147
107, 0x06ca6351
108, 0x14292967
109, 0x27b70a85
110, 0x2e1b2138
111, 0x4d2c6dfc
112, 0x53380d13
113, 0x650a7354
114, 0x766a0abb
115, 0x81c2c92e
116, 0x92722c85
117, 0xa2bfe8a1
118, 0xa81a664b
119, 0xc24b8b70
120, 0xc76c51a3
121, 0xd192e819
122, 0xd6990624
123, 0xf40e3585
124, 0x106aa070
125, 0x19a4c116
126, 0x1e376c08
127, 0x2748774c
128, 0x34b0bcb5
129, 0x391c0cb3
130, 0x4ed8aa4a
131, 0x5b9cca4f
132, 0x682e6ff3
133, 0x748f82ee
134, 0x78a5636f
135, 0x84c87814
136, 0x8cc70208
137, 0x90befffa
138, 0xa4506ceb
139, 0xbef9a3f7
140, 0xc67178f2
141} ;
142
143int crypto_hashblocks(unsigned char *statebytes,const unsigned char *in,unsigned long long inlen)
144{
145 uint32 state[8];
146 uint32 r0;
147 uint32 r1;
148 uint32 r2;
149 uint32 r3;
150 uint32 r4;
151 uint32 r5;
152 uint32 r6;
153 uint32 r7;
154
155 r0 = load_bigendian(statebytes + 0); state[0] = r0;
156 r1 = load_bigendian(statebytes + 4); state[1] = r1;
157 r2 = load_bigendian(statebytes + 8); state[2] = r2;
158 r3 = load_bigendian(statebytes + 12); state[3] = r3;
159 r4 = load_bigendian(statebytes + 16); state[4] = r4;
160 r5 = load_bigendian(statebytes + 20); state[5] = r5;
161 r6 = load_bigendian(statebytes + 24); state[6] = r6;
162 r7 = load_bigendian(statebytes + 28); state[7] = r7;
163
164 while (inlen >= 64) {
165 uint32 w0 = load_bigendian(in + 0);
166 uint32 w1 = load_bigendian(in + 4);
167 uint32 w2 = load_bigendian(in + 8);
168 uint32 w3 = load_bigendian(in + 12);
169 uint32 w4 = load_bigendian(in + 16);
170 uint32 w5 = load_bigendian(in + 20);
171 uint32 w6 = load_bigendian(in + 24);
172 uint32 w7 = load_bigendian(in + 28);
173 uint32 w8 = load_bigendian(in + 32);
174 uint32 w9 = load_bigendian(in + 36);
175 uint32 w10 = load_bigendian(in + 40);
176 uint32 w11 = load_bigendian(in + 44);
177 uint32 w12 = load_bigendian(in + 48);
178 uint32 w13 = load_bigendian(in + 52);
179 uint32 w14 = load_bigendian(in + 56);
180 uint32 w15 = load_bigendian(in + 60);
181
182 G(r0,r1,r2,r3,r4,r5,r6,r7,0)
183
184 EXPAND
185
186 G(r0,r1,r2,r3,r4,r5,r6,r7,16)
187
188 EXPAND
189
190 G(r0,r1,r2,r3,r4,r5,r6,r7,32)
191
192 EXPAND
193
194 G(r0,r1,r2,r3,r4,r5,r6,r7,48)
195
196 r0 += state[0];
197 r1 += state[1];
198 r2 += state[2];
199 r3 += state[3];
200 r4 += state[4];
201 r5 += state[5];
202 r6 += state[6];
203 r7 += state[7];
204
205 state[0] = r0;
206 state[1] = r1;
207 state[2] = r2;
208 state[3] = r3;
209 state[4] = r4;
210 state[5] = r5;
211 state[6] = r6;
212 state[7] = r7;
213
214 in += 64;
215 inlen -= 64;
216 }
217
218 store_bigendian(statebytes + 0,state[0]);
219 store_bigendian(statebytes + 4,state[1]);
220 store_bigendian(statebytes + 8,state[2]);
221 store_bigendian(statebytes + 12,state[3]);
222 store_bigendian(statebytes + 16,state[4]);
223 store_bigendian(statebytes + 20,state[5]);
224 store_bigendian(statebytes + 24,state[6]);
225 store_bigendian(statebytes + 28,state[7]);
226
227 return 0;
228}
diff --git a/nacl/crypto_hashblocks/sha256/inplace/implementors b/nacl/crypto_hashblocks/sha256/inplace/implementors
new file mode 100644
index 00000000..f6fb3c73
--- /dev/null
+++ b/nacl/crypto_hashblocks/sha256/inplace/implementors
@@ -0,0 +1 @@
Daniel J. Bernstein
diff --git a/nacl/crypto_hashblocks/sha256/ref/api.h b/nacl/crypto_hashblocks/sha256/ref/api.h
new file mode 100644
index 00000000..005a4f47
--- /dev/null
+++ b/nacl/crypto_hashblocks/sha256/ref/api.h
@@ -0,0 +1,2 @@
1#define CRYPTO_STATEBYTES 32
2#define CRYPTO_BLOCKBYTES 64
diff --git a/nacl/crypto_hashblocks/sha256/ref/blocks.c b/nacl/crypto_hashblocks/sha256/ref/blocks.c
new file mode 100644
index 00000000..ad977945
--- /dev/null
+++ b/nacl/crypto_hashblocks/sha256/ref/blocks.c
@@ -0,0 +1,212 @@
1#include "crypto_hashblocks.h"
2
3typedef unsigned int uint32;
4
5static uint32 load_bigendian(const unsigned char *x)
6{
7 return
8 (uint32) (x[3]) \
9 | (((uint32) (x[2])) << 8) \
10 | (((uint32) (x[1])) << 16) \
11 | (((uint32) (x[0])) << 24)
12 ;
13}
14
15static void store_bigendian(unsigned char *x,uint32 u)
16{
17 x[3] = u; u >>= 8;
18 x[2] = u; u >>= 8;
19 x[1] = u; u >>= 8;
20 x[0] = u;
21}
22
23#define SHR(x,c) ((x) >> (c))
24#define ROTR(x,c) (((x) >> (c)) | ((x) << (32 - (c))))
25
26#define Ch(x,y,z) ((x & y) ^ (~x & z))
27#define Maj(x,y,z) ((x & y) ^ (x & z) ^ (y & z))
28#define Sigma0(x) (ROTR(x, 2) ^ ROTR(x,13) ^ ROTR(x,22))
29#define Sigma1(x) (ROTR(x, 6) ^ ROTR(x,11) ^ ROTR(x,25))
30#define sigma0(x) (ROTR(x, 7) ^ ROTR(x,18) ^ SHR(x, 3))
31#define sigma1(x) (ROTR(x,17) ^ ROTR(x,19) ^ SHR(x,10))
32
33#define M(w0,w14,w9,w1) w0 = sigma1(w14) + w9 + sigma0(w1) + w0;
34
35#define EXPAND \
36 M(w0 ,w14,w9 ,w1 ) \
37 M(w1 ,w15,w10,w2 ) \
38 M(w2 ,w0 ,w11,w3 ) \
39 M(w3 ,w1 ,w12,w4 ) \
40 M(w4 ,w2 ,w13,w5 ) \
41 M(w5 ,w3 ,w14,w6 ) \
42 M(w6 ,w4 ,w15,w7 ) \
43 M(w7 ,w5 ,w0 ,w8 ) \
44 M(w8 ,w6 ,w1 ,w9 ) \
45 M(w9 ,w7 ,w2 ,w10) \
46 M(w10,w8 ,w3 ,w11) \
47 M(w11,w9 ,w4 ,w12) \
48 M(w12,w10,w5 ,w13) \
49 M(w13,w11,w6 ,w14) \
50 M(w14,w12,w7 ,w15) \
51 M(w15,w13,w8 ,w0 )
52
53#define F(w,k) \
54 T1 = h + Sigma1(e) + Ch(e,f,g) + k + w; \
55 T2 = Sigma0(a) + Maj(a,b,c); \
56 h = g; \
57 g = f; \
58 f = e; \
59 e = d + T1; \
60 d = c; \
61 c = b; \
62 b = a; \
63 a = T1 + T2;
64
65int crypto_hashblocks(unsigned char *statebytes,const unsigned char *in,unsigned long long inlen)
66{
67 uint32 state[8];
68 uint32 a;
69 uint32 b;
70 uint32 c;
71 uint32 d;
72 uint32 e;
73 uint32 f;
74 uint32 g;
75 uint32 h;
76 uint32 T1;
77 uint32 T2;
78
79 a = load_bigendian(statebytes + 0); state[0] = a;
80 b = load_bigendian(statebytes + 4); state[1] = b;
81 c = load_bigendian(statebytes + 8); state[2] = c;
82 d = load_bigendian(statebytes + 12); state[3] = d;
83 e = load_bigendian(statebytes + 16); state[4] = e;
84 f = load_bigendian(statebytes + 20); state[5] = f;
85 g = load_bigendian(statebytes + 24); state[6] = g;
86 h = load_bigendian(statebytes + 28); state[7] = h;
87
88 while (inlen >= 64) {
89 uint32 w0 = load_bigendian(in + 0);
90 uint32 w1 = load_bigendian(in + 4);
91 uint32 w2 = load_bigendian(in + 8);
92 uint32 w3 = load_bigendian(in + 12);
93 uint32 w4 = load_bigendian(in + 16);
94 uint32 w5 = load_bigendian(in + 20);
95 uint32 w6 = load_bigendian(in + 24);
96 uint32 w7 = load_bigendian(in + 28);
97 uint32 w8 = load_bigendian(in + 32);
98 uint32 w9 = load_bigendian(in + 36);
99 uint32 w10 = load_bigendian(in + 40);
100 uint32 w11 = load_bigendian(in + 44);
101 uint32 w12 = load_bigendian(in + 48);
102 uint32 w13 = load_bigendian(in + 52);
103 uint32 w14 = load_bigendian(in + 56);
104 uint32 w15 = load_bigendian(in + 60);
105
106 F(w0 ,0x428a2f98)
107 F(w1 ,0x71374491)
108 F(w2 ,0xb5c0fbcf)
109 F(w3 ,0xe9b5dba5)
110 F(w4 ,0x3956c25b)
111 F(w5 ,0x59f111f1)
112 F(w6 ,0x923f82a4)
113 F(w7 ,0xab1c5ed5)
114 F(w8 ,0xd807aa98)
115 F(w9 ,0x12835b01)
116 F(w10,0x243185be)
117 F(w11,0x550c7dc3)
118 F(w12,0x72be5d74)
119 F(w13,0x80deb1fe)
120 F(w14,0x9bdc06a7)
121 F(w15,0xc19bf174)
122
123 EXPAND
124
125 F(w0 ,0xe49b69c1)
126 F(w1 ,0xefbe4786)
127 F(w2 ,0x0fc19dc6)
128 F(w3 ,0x240ca1cc)
129 F(w4 ,0x2de92c6f)
130 F(w5 ,0x4a7484aa)
131 F(w6 ,0x5cb0a9dc)
132 F(w7 ,0x76f988da)
133 F(w8 ,0x983e5152)
134 F(w9 ,0xa831c66d)
135 F(w10,0xb00327c8)
136 F(w11,0xbf597fc7)
137 F(w12,0xc6e00bf3)
138 F(w13,0xd5a79147)
139 F(w14,0x06ca6351)
140 F(w15,0x14292967)
141
142 EXPAND
143
144 F(w0 ,0x27b70a85)
145 F(w1 ,0x2e1b2138)
146 F(w2 ,0x4d2c6dfc)
147 F(w3 ,0x53380d13)
148 F(w4 ,0x650a7354)
149 F(w5 ,0x766a0abb)
150 F(w6 ,0x81c2c92e)
151 F(w7 ,0x92722c85)
152 F(w8 ,0xa2bfe8a1)
153 F(w9 ,0xa81a664b)
154 F(w10,0xc24b8b70)
155 F(w11,0xc76c51a3)
156 F(w12,0xd192e819)
157 F(w13,0xd6990624)
158 F(w14,0xf40e3585)
159 F(w15,0x106aa070)
160
161 EXPAND
162
163 F(w0 ,0x19a4c116)
164 F(w1 ,0x1e376c08)
165 F(w2 ,0x2748774c)
166 F(w3 ,0x34b0bcb5)
167 F(w4 ,0x391c0cb3)
168 F(w5 ,0x4ed8aa4a)
169 F(w6 ,0x5b9cca4f)
170 F(w7 ,0x682e6ff3)
171 F(w8 ,0x748f82ee)
172 F(w9 ,0x78a5636f)
173 F(w10,0x84c87814)
174 F(w11,0x8cc70208)
175 F(w12,0x90befffa)
176 F(w13,0xa4506ceb)
177 F(w14,0xbef9a3f7)
178 F(w15,0xc67178f2)
179
180 a += state[0];
181 b += state[1];
182 c += state[2];
183 d += state[3];
184 e += state[4];
185 f += state[5];
186 g += state[6];
187 h += state[7];
188
189 state[0] = a;
190 state[1] = b;
191 state[2] = c;
192 state[3] = d;
193 state[4] = e;
194 state[5] = f;
195 state[6] = g;
196 state[7] = h;
197
198 in += 64;
199 inlen -= 64;
200 }
201
202 store_bigendian(statebytes + 0,state[0]);
203 store_bigendian(statebytes + 4,state[1]);
204 store_bigendian(statebytes + 8,state[2]);
205 store_bigendian(statebytes + 12,state[3]);
206 store_bigendian(statebytes + 16,state[4]);
207 store_bigendian(statebytes + 20,state[5]);
208 store_bigendian(statebytes + 24,state[6]);
209 store_bigendian(statebytes + 28,state[7]);
210
211 return 0;
212}
diff --git a/nacl/crypto_hashblocks/sha256/ref/implementors b/nacl/crypto_hashblocks/sha256/ref/implementors
new file mode 100644
index 00000000..f6fb3c73
--- /dev/null
+++ b/nacl/crypto_hashblocks/sha256/ref/implementors
@@ -0,0 +1 @@
Daniel J. Bernstein
diff --git a/nacl/crypto_hashblocks/sha256/used b/nacl/crypto_hashblocks/sha256/used
new file mode 100644
index 00000000..e69de29b
--- /dev/null
+++ b/nacl/crypto_hashblocks/sha256/used
diff --git a/nacl/crypto_hashblocks/sha512/checksum b/nacl/crypto_hashblocks/sha512/checksum
new file mode 100644
index 00000000..ed5245ec
--- /dev/null
+++ b/nacl/crypto_hashblocks/sha512/checksum
@@ -0,0 +1 @@
f005c91634ae549f0dd4529ddbaf07038cb75a59b818cd1d4eb4e2b4019ab6733556131f320c4a145c735a22594581d454cccb15c18bf198ffcb2da29fe39456
diff --git a/nacl/crypto_hashblocks/sha512/inplace/api.h b/nacl/crypto_hashblocks/sha512/inplace/api.h
new file mode 100644
index 00000000..ac45d103
--- /dev/null
+++ b/nacl/crypto_hashblocks/sha512/inplace/api.h
@@ -0,0 +1,2 @@
1#define CRYPTO_STATEBYTES 64
2#define CRYPTO_BLOCKBYTES 128
diff --git a/nacl/crypto_hashblocks/sha512/inplace/blocks.c b/nacl/crypto_hashblocks/sha512/inplace/blocks.c
new file mode 100644
index 00000000..93791b69
--- /dev/null
+++ b/nacl/crypto_hashblocks/sha512/inplace/blocks.c
@@ -0,0 +1,256 @@
1#include "crypto_hashblocks.h"
2
3typedef unsigned long long uint64;
4
5static uint64 load_bigendian(const unsigned char *x)
6{
7 return
8 (uint64) (x[7]) \
9 | (((uint64) (x[6])) << 8) \
10 | (((uint64) (x[5])) << 16) \
11 | (((uint64) (x[4])) << 24) \
12 | (((uint64) (x[3])) << 32) \
13 | (((uint64) (x[2])) << 40) \
14 | (((uint64) (x[1])) << 48) \
15 | (((uint64) (x[0])) << 56)
16 ;
17}
18
19static void store_bigendian(unsigned char *x,uint64 u)
20{
21 x[7] = u; u >>= 8;
22 x[6] = u; u >>= 8;
23 x[5] = u; u >>= 8;
24 x[4] = u; u >>= 8;
25 x[3] = u; u >>= 8;
26 x[2] = u; u >>= 8;
27 x[1] = u; u >>= 8;
28 x[0] = u;
29}
30
31#define SHR(x,c) ((x) >> (c))
32#define ROTR(x,c) (((x) >> (c)) | ((x) << (64 - (c))))
33
34#define Ch(x,y,z) ((x & y) ^ (~x & z))
35#define Maj(x,y,z) ((x & y) ^ (x & z) ^ (y & z))
36#define Sigma0(x) (ROTR(x,28) ^ ROTR(x,34) ^ ROTR(x,39))
37#define Sigma1(x) (ROTR(x,14) ^ ROTR(x,18) ^ ROTR(x,41))
38#define sigma0(x) (ROTR(x, 1) ^ ROTR(x, 8) ^ SHR(x,7))
39#define sigma1(x) (ROTR(x,19) ^ ROTR(x,61) ^ SHR(x,6))
40
41#define M(w0,w14,w9,w1) w0 = sigma1(w14) + w9 + sigma0(w1) + w0;
42
43#define EXPAND \
44 M(w0 ,w14,w9 ,w1 ) \
45 M(w1 ,w15,w10,w2 ) \
46 M(w2 ,w0 ,w11,w3 ) \
47 M(w3 ,w1 ,w12,w4 ) \
48 M(w4 ,w2 ,w13,w5 ) \
49 M(w5 ,w3 ,w14,w6 ) \
50 M(w6 ,w4 ,w15,w7 ) \
51 M(w7 ,w5 ,w0 ,w8 ) \
52 M(w8 ,w6 ,w1 ,w9 ) \
53 M(w9 ,w7 ,w2 ,w10) \
54 M(w10,w8 ,w3 ,w11) \
55 M(w11,w9 ,w4 ,w12) \
56 M(w12,w10,w5 ,w13) \
57 M(w13,w11,w6 ,w14) \
58 M(w14,w12,w7 ,w15) \
59 M(w15,w13,w8 ,w0 )
60
61#define F(r0,r1,r2,r3,r4,r5,r6,r7,w,k) \
62 r7 += Sigma1(r4) + Ch(r4,r5,r6) + k + w; \
63 r3 += r7; \
64 r7 += Sigma0(r0) + Maj(r0,r1,r2);
65
66#define G(r0,r1,r2,r3,r4,r5,r6,r7,i) \
67 F(r0,r1,r2,r3,r4,r5,r6,r7,w0 ,round[i + 0]) \
68 F(r7,r0,r1,r2,r3,r4,r5,r6,w1 ,round[i + 1]) \
69 F(r6,r7,r0,r1,r2,r3,r4,r5,w2 ,round[i + 2]) \
70 F(r5,r6,r7,r0,r1,r2,r3,r4,w3 ,round[i + 3]) \
71 F(r4,r5,r6,r7,r0,r1,r2,r3,w4 ,round[i + 4]) \
72 F(r3,r4,r5,r6,r7,r0,r1,r2,w5 ,round[i + 5]) \
73 F(r2,r3,r4,r5,r6,r7,r0,r1,w6 ,round[i + 6]) \
74 F(r1,r2,r3,r4,r5,r6,r7,r0,w7 ,round[i + 7]) \
75 F(r0,r1,r2,r3,r4,r5,r6,r7,w8 ,round[i + 8]) \
76 F(r7,r0,r1,r2,r3,r4,r5,r6,w9 ,round[i + 9]) \
77 F(r6,r7,r0,r1,r2,r3,r4,r5,w10,round[i + 10]) \
78 F(r5,r6,r7,r0,r1,r2,r3,r4,w11,round[i + 11]) \
79 F(r4,r5,r6,r7,r0,r1,r2,r3,w12,round[i + 12]) \
80 F(r3,r4,r5,r6,r7,r0,r1,r2,w13,round[i + 13]) \
81 F(r2,r3,r4,r5,r6,r7,r0,r1,w14,round[i + 14]) \
82 F(r1,r2,r3,r4,r5,r6,r7,r0,w15,round[i + 15])
83
84static const uint64 round[80] = {
85 0x428a2f98d728ae22ULL
86, 0x7137449123ef65cdULL
87, 0xb5c0fbcfec4d3b2fULL
88, 0xe9b5dba58189dbbcULL
89, 0x3956c25bf348b538ULL
90, 0x59f111f1b605d019ULL
91, 0x923f82a4af194f9bULL
92, 0xab1c5ed5da6d8118ULL
93, 0xd807aa98a3030242ULL
94, 0x12835b0145706fbeULL
95, 0x243185be4ee4b28cULL
96, 0x550c7dc3d5ffb4e2ULL
97, 0x72be5d74f27b896fULL
98, 0x80deb1fe3b1696b1ULL
99, 0x9bdc06a725c71235ULL
100, 0xc19bf174cf692694ULL
101, 0xe49b69c19ef14ad2ULL
102, 0xefbe4786384f25e3ULL
103, 0x0fc19dc68b8cd5b5ULL
104, 0x240ca1cc77ac9c65ULL
105, 0x2de92c6f592b0275ULL
106, 0x4a7484aa6ea6e483ULL
107, 0x5cb0a9dcbd41fbd4ULL
108, 0x76f988da831153b5ULL
109, 0x983e5152ee66dfabULL
110, 0xa831c66d2db43210ULL
111, 0xb00327c898fb213fULL
112, 0xbf597fc7beef0ee4ULL
113, 0xc6e00bf33da88fc2ULL
114, 0xd5a79147930aa725ULL
115, 0x06ca6351e003826fULL
116, 0x142929670a0e6e70ULL
117, 0x27b70a8546d22ffcULL
118, 0x2e1b21385c26c926ULL
119, 0x4d2c6dfc5ac42aedULL
120, 0x53380d139d95b3dfULL
121, 0x650a73548baf63deULL
122, 0x766a0abb3c77b2a8ULL
123, 0x81c2c92e47edaee6ULL
124, 0x92722c851482353bULL
125, 0xa2bfe8a14cf10364ULL
126, 0xa81a664bbc423001ULL
127, 0xc24b8b70d0f89791ULL
128, 0xc76c51a30654be30ULL
129, 0xd192e819d6ef5218ULL
130, 0xd69906245565a910ULL
131, 0xf40e35855771202aULL
132, 0x106aa07032bbd1b8ULL
133, 0x19a4c116b8d2d0c8ULL
134, 0x1e376c085141ab53ULL
135, 0x2748774cdf8eeb99ULL
136, 0x34b0bcb5e19b48a8ULL
137, 0x391c0cb3c5c95a63ULL
138, 0x4ed8aa4ae3418acbULL
139, 0x5b9cca4f7763e373ULL
140, 0x682e6ff3d6b2b8a3ULL
141, 0x748f82ee5defb2fcULL
142, 0x78a5636f43172f60ULL
143, 0x84c87814a1f0ab72ULL
144, 0x8cc702081a6439ecULL
145, 0x90befffa23631e28ULL
146, 0xa4506cebde82bde9ULL
147, 0xbef9a3f7b2c67915ULL
148, 0xc67178f2e372532bULL
149, 0xca273eceea26619cULL
150, 0xd186b8c721c0c207ULL
151, 0xeada7dd6cde0eb1eULL
152, 0xf57d4f7fee6ed178ULL
153, 0x06f067aa72176fbaULL
154, 0x0a637dc5a2c898a6ULL
155, 0x113f9804bef90daeULL
156, 0x1b710b35131c471bULL
157, 0x28db77f523047d84ULL
158, 0x32caab7b40c72493ULL
159, 0x3c9ebe0a15c9bebcULL
160, 0x431d67c49c100d4cULL
161, 0x4cc5d4becb3e42b6ULL
162, 0x597f299cfc657e2aULL
163, 0x5fcb6fab3ad6faecULL
164, 0x6c44198c4a475817ULL
165};
166
167int crypto_hashblocks(unsigned char *statebytes,const unsigned char *in,unsigned long long inlen)
168{
169 uint64 state[8];
170 uint64 r0;
171 uint64 r1;
172 uint64 r2;
173 uint64 r3;
174 uint64 r4;
175 uint64 r5;
176 uint64 r6;
177 uint64 r7;
178
179 r0 = load_bigendian(statebytes + 0); state[0] = r0;
180 r1 = load_bigendian(statebytes + 8); state[1] = r1;
181 r2 = load_bigendian(statebytes + 16); state[2] = r2;
182 r3 = load_bigendian(statebytes + 24); state[3] = r3;
183 r4 = load_bigendian(statebytes + 32); state[4] = r4;
184 r5 = load_bigendian(statebytes + 40); state[5] = r5;
185 r6 = load_bigendian(statebytes + 48); state[6] = r6;
186 r7 = load_bigendian(statebytes + 56); state[7] = r7;
187
188 while (inlen >= 128) {
189 uint64 w0 = load_bigendian(in + 0);
190 uint64 w1 = load_bigendian(in + 8);
191 uint64 w2 = load_bigendian(in + 16);
192 uint64 w3 = load_bigendian(in + 24);
193 uint64 w4 = load_bigendian(in + 32);
194 uint64 w5 = load_bigendian(in + 40);
195 uint64 w6 = load_bigendian(in + 48);
196 uint64 w7 = load_bigendian(in + 56);
197 uint64 w8 = load_bigendian(in + 64);
198 uint64 w9 = load_bigendian(in + 72);
199 uint64 w10 = load_bigendian(in + 80);
200 uint64 w11 = load_bigendian(in + 88);
201 uint64 w12 = load_bigendian(in + 96);
202 uint64 w13 = load_bigendian(in + 104);
203 uint64 w14 = load_bigendian(in + 112);
204 uint64 w15 = load_bigendian(in + 120);
205
206 G(r0,r1,r2,r3,r4,r5,r6,r7,0)
207
208 EXPAND
209
210 G(r0,r1,r2,r3,r4,r5,r6,r7,16)
211
212 EXPAND
213
214 G(r0,r1,r2,r3,r4,r5,r6,r7,32)
215
216 EXPAND
217
218 G(r0,r1,r2,r3,r4,r5,r6,r7,48)
219
220 EXPAND
221
222 G(r0,r1,r2,r3,r4,r5,r6,r7,64)
223
224 r0 += state[0];
225 r1 += state[1];
226 r2 += state[2];
227 r3 += state[3];
228 r4 += state[4];
229 r5 += state[5];
230 r6 += state[6];
231 r7 += state[7];
232
233 state[0] = r0;
234 state[1] = r1;
235 state[2] = r2;
236 state[3] = r3;
237 state[4] = r4;
238 state[5] = r5;
239 state[6] = r6;
240 state[7] = r7;
241
242 in += 128;
243 inlen -= 128;
244 }
245
246 store_bigendian(statebytes + 0,state[0]);
247 store_bigendian(statebytes + 8,state[1]);
248 store_bigendian(statebytes + 16,state[2]);
249 store_bigendian(statebytes + 24,state[3]);
250 store_bigendian(statebytes + 32,state[4]);
251 store_bigendian(statebytes + 40,state[5]);
252 store_bigendian(statebytes + 48,state[6]);
253 store_bigendian(statebytes + 56,state[7]);
254
255 return 0;
256}
diff --git a/nacl/crypto_hashblocks/sha512/inplace/implementors b/nacl/crypto_hashblocks/sha512/inplace/implementors
new file mode 100644
index 00000000..f6fb3c73
--- /dev/null
+++ b/nacl/crypto_hashblocks/sha512/inplace/implementors
@@ -0,0 +1 @@
Daniel J. Bernstein
diff --git a/nacl/crypto_hashblocks/sha512/ref/api.h b/nacl/crypto_hashblocks/sha512/ref/api.h
new file mode 100644
index 00000000..ac45d103
--- /dev/null
+++ b/nacl/crypto_hashblocks/sha512/ref/api.h
@@ -0,0 +1,2 @@
1#define CRYPTO_STATEBYTES 64
2#define CRYPTO_BLOCKBYTES 128
diff --git a/nacl/crypto_hashblocks/sha512/ref/blocks.c b/nacl/crypto_hashblocks/sha512/ref/blocks.c
new file mode 100644
index 00000000..f8fae491
--- /dev/null
+++ b/nacl/crypto_hashblocks/sha512/ref/blocks.c
@@ -0,0 +1,239 @@
1#include "crypto_hashblocks.h"
2
3typedef unsigned long long uint64;
4
5static uint64 load_bigendian(const unsigned char *x)
6{
7 return
8 (uint64) (x[7]) \
9 | (((uint64) (x[6])) << 8) \
10 | (((uint64) (x[5])) << 16) \
11 | (((uint64) (x[4])) << 24) \
12 | (((uint64) (x[3])) << 32) \
13 | (((uint64) (x[2])) << 40) \
14 | (((uint64) (x[1])) << 48) \
15 | (((uint64) (x[0])) << 56)
16 ;
17}
18
19static void store_bigendian(unsigned char *x,uint64 u)
20{
21 x[7] = u; u >>= 8;
22 x[6] = u; u >>= 8;
23 x[5] = u; u >>= 8;
24 x[4] = u; u >>= 8;
25 x[3] = u; u >>= 8;
26 x[2] = u; u >>= 8;
27 x[1] = u; u >>= 8;
28 x[0] = u;
29}
30
31#define SHR(x,c) ((x) >> (c))
32#define ROTR(x,c) (((x) >> (c)) | ((x) << (64 - (c))))
33
34#define Ch(x,y,z) ((x & y) ^ (~x & z))
35#define Maj(x,y,z) ((x & y) ^ (x & z) ^ (y & z))
36#define Sigma0(x) (ROTR(x,28) ^ ROTR(x,34) ^ ROTR(x,39))
37#define Sigma1(x) (ROTR(x,14) ^ ROTR(x,18) ^ ROTR(x,41))
38#define sigma0(x) (ROTR(x, 1) ^ ROTR(x, 8) ^ SHR(x,7))
39#define sigma1(x) (ROTR(x,19) ^ ROTR(x,61) ^ SHR(x,6))
40
41#define M(w0,w14,w9,w1) w0 = sigma1(w14) + w9 + sigma0(w1) + w0;
42
43#define EXPAND \
44 M(w0 ,w14,w9 ,w1 ) \
45 M(w1 ,w15,w10,w2 ) \
46 M(w2 ,w0 ,w11,w3 ) \
47 M(w3 ,w1 ,w12,w4 ) \
48 M(w4 ,w2 ,w13,w5 ) \
49 M(w5 ,w3 ,w14,w6 ) \
50 M(w6 ,w4 ,w15,w7 ) \
51 M(w7 ,w5 ,w0 ,w8 ) \
52 M(w8 ,w6 ,w1 ,w9 ) \
53 M(w9 ,w7 ,w2 ,w10) \
54 M(w10,w8 ,w3 ,w11) \
55 M(w11,w9 ,w4 ,w12) \
56 M(w12,w10,w5 ,w13) \
57 M(w13,w11,w6 ,w14) \
58 M(w14,w12,w7 ,w15) \
59 M(w15,w13,w8 ,w0 )
60
61#define F(w,k) \
62 T1 = h + Sigma1(e) + Ch(e,f,g) + k + w; \
63 T2 = Sigma0(a) + Maj(a,b,c); \
64 h = g; \
65 g = f; \
66 f = e; \
67 e = d + T1; \
68 d = c; \
69 c = b; \
70 b = a; \
71 a = T1 + T2;
72
73int crypto_hashblocks(unsigned char *statebytes,const unsigned char *in,unsigned long long inlen)
74{
75 uint64 state[8];
76 uint64 a;
77 uint64 b;
78 uint64 c;
79 uint64 d;
80 uint64 e;
81 uint64 f;
82 uint64 g;
83 uint64 h;
84 uint64 T1;
85 uint64 T2;
86
87 a = load_bigendian(statebytes + 0); state[0] = a;
88 b = load_bigendian(statebytes + 8); state[1] = b;
89 c = load_bigendian(statebytes + 16); state[2] = c;
90 d = load_bigendian(statebytes + 24); state[3] = d;
91 e = load_bigendian(statebytes + 32); state[4] = e;
92 f = load_bigendian(statebytes + 40); state[5] = f;
93 g = load_bigendian(statebytes + 48); state[6] = g;
94 h = load_bigendian(statebytes + 56); state[7] = h;
95
96 while (inlen >= 128) {
97 uint64 w0 = load_bigendian(in + 0);
98 uint64 w1 = load_bigendian(in + 8);
99 uint64 w2 = load_bigendian(in + 16);
100 uint64 w3 = load_bigendian(in + 24);
101 uint64 w4 = load_bigendian(in + 32);
102 uint64 w5 = load_bigendian(in + 40);
103 uint64 w6 = load_bigendian(in + 48);
104 uint64 w7 = load_bigendian(in + 56);
105 uint64 w8 = load_bigendian(in + 64);
106 uint64 w9 = load_bigendian(in + 72);
107 uint64 w10 = load_bigendian(in + 80);
108 uint64 w11 = load_bigendian(in + 88);
109 uint64 w12 = load_bigendian(in + 96);
110 uint64 w13 = load_bigendian(in + 104);
111 uint64 w14 = load_bigendian(in + 112);
112 uint64 w15 = load_bigendian(in + 120);
113
114 F(w0 ,0x428a2f98d728ae22ULL)
115 F(w1 ,0x7137449123ef65cdULL)
116 F(w2 ,0xb5c0fbcfec4d3b2fULL)
117 F(w3 ,0xe9b5dba58189dbbcULL)
118 F(w4 ,0x3956c25bf348b538ULL)
119 F(w5 ,0x59f111f1b605d019ULL)
120 F(w6 ,0x923f82a4af194f9bULL)
121 F(w7 ,0xab1c5ed5da6d8118ULL)
122 F(w8 ,0xd807aa98a3030242ULL)
123 F(w9 ,0x12835b0145706fbeULL)
124 F(w10,0x243185be4ee4b28cULL)
125 F(w11,0x550c7dc3d5ffb4e2ULL)
126 F(w12,0x72be5d74f27b896fULL)
127 F(w13,0x80deb1fe3b1696b1ULL)
128 F(w14,0x9bdc06a725c71235ULL)
129 F(w15,0xc19bf174cf692694ULL)
130
131 EXPAND
132
133 F(w0 ,0xe49b69c19ef14ad2ULL)
134 F(w1 ,0xefbe4786384f25e3ULL)
135 F(w2 ,0x0fc19dc68b8cd5b5ULL)
136 F(w3 ,0x240ca1cc77ac9c65ULL)
137 F(w4 ,0x2de92c6f592b0275ULL)
138 F(w5 ,0x4a7484aa6ea6e483ULL)
139 F(w6 ,0x5cb0a9dcbd41fbd4ULL)
140 F(w7 ,0x76f988da831153b5ULL)
141 F(w8 ,0x983e5152ee66dfabULL)
142 F(w9 ,0xa831c66d2db43210ULL)
143 F(w10,0xb00327c898fb213fULL)
144 F(w11,0xbf597fc7beef0ee4ULL)
145 F(w12,0xc6e00bf33da88fc2ULL)
146 F(w13,0xd5a79147930aa725ULL)
147 F(w14,0x06ca6351e003826fULL)
148 F(w15,0x142929670a0e6e70ULL)
149
150 EXPAND
151
152 F(w0 ,0x27b70a8546d22ffcULL)
153 F(w1 ,0x2e1b21385c26c926ULL)
154 F(w2 ,0x4d2c6dfc5ac42aedULL)
155 F(w3 ,0x53380d139d95b3dfULL)
156 F(w4 ,0x650a73548baf63deULL)
157 F(w5 ,0x766a0abb3c77b2a8ULL)
158 F(w6 ,0x81c2c92e47edaee6ULL)
159 F(w7 ,0x92722c851482353bULL)
160 F(w8 ,0xa2bfe8a14cf10364ULL)
161 F(w9 ,0xa81a664bbc423001ULL)
162 F(w10,0xc24b8b70d0f89791ULL)
163 F(w11,0xc76c51a30654be30ULL)
164 F(w12,0xd192e819d6ef5218ULL)
165 F(w13,0xd69906245565a910ULL)
166 F(w14,0xf40e35855771202aULL)
167 F(w15,0x106aa07032bbd1b8ULL)
168
169 EXPAND
170
171 F(w0 ,0x19a4c116b8d2d0c8ULL)
172 F(w1 ,0x1e376c085141ab53ULL)
173 F(w2 ,0x2748774cdf8eeb99ULL)
174 F(w3 ,0x34b0bcb5e19b48a8ULL)
175 F(w4 ,0x391c0cb3c5c95a63ULL)
176 F(w5 ,0x4ed8aa4ae3418acbULL)
177 F(w6 ,0x5b9cca4f7763e373ULL)
178 F(w7 ,0x682e6ff3d6b2b8a3ULL)
179 F(w8 ,0x748f82ee5defb2fcULL)
180 F(w9 ,0x78a5636f43172f60ULL)
181 F(w10,0x84c87814a1f0ab72ULL)
182 F(w11,0x8cc702081a6439ecULL)
183 F(w12,0x90befffa23631e28ULL)
184 F(w13,0xa4506cebde82bde9ULL)
185 F(w14,0xbef9a3f7b2c67915ULL)
186 F(w15,0xc67178f2e372532bULL)
187
188 EXPAND
189
190 F(w0 ,0xca273eceea26619cULL)
191 F(w1 ,0xd186b8c721c0c207ULL)
192 F(w2 ,0xeada7dd6cde0eb1eULL)
193 F(w3 ,0xf57d4f7fee6ed178ULL)
194 F(w4 ,0x06f067aa72176fbaULL)
195 F(w5 ,0x0a637dc5a2c898a6ULL)
196 F(w6 ,0x113f9804bef90daeULL)
197 F(w7 ,0x1b710b35131c471bULL)
198 F(w8 ,0x28db77f523047d84ULL)
199 F(w9 ,0x32caab7b40c72493ULL)
200 F(w10,0x3c9ebe0a15c9bebcULL)
201 F(w11,0x431d67c49c100d4cULL)
202 F(w12,0x4cc5d4becb3e42b6ULL)
203 F(w13,0x597f299cfc657e2aULL)
204 F(w14,0x5fcb6fab3ad6faecULL)
205 F(w15,0x6c44198c4a475817ULL)
206
207 a += state[0];
208 b += state[1];
209 c += state[2];
210 d += state[3];
211 e += state[4];
212 f += state[5];
213 g += state[6];
214 h += state[7];
215
216 state[0] = a;
217 state[1] = b;
218 state[2] = c;
219 state[3] = d;
220 state[4] = e;
221 state[5] = f;
222 state[6] = g;
223 state[7] = h;
224
225 in += 128;
226 inlen -= 128;
227 }
228
229 store_bigendian(statebytes + 0,state[0]);
230 store_bigendian(statebytes + 8,state[1]);
231 store_bigendian(statebytes + 16,state[2]);
232 store_bigendian(statebytes + 24,state[3]);
233 store_bigendian(statebytes + 32,state[4]);
234 store_bigendian(statebytes + 40,state[5]);
235 store_bigendian(statebytes + 48,state[6]);
236 store_bigendian(statebytes + 56,state[7]);
237
238 return 0;
239}
diff --git a/nacl/crypto_hashblocks/sha512/ref/implementors b/nacl/crypto_hashblocks/sha512/ref/implementors
new file mode 100644
index 00000000..f6fb3c73
--- /dev/null
+++ b/nacl/crypto_hashblocks/sha512/ref/implementors
@@ -0,0 +1 @@
Daniel J. Bernstein
diff --git a/nacl/crypto_hashblocks/sha512/selected b/nacl/crypto_hashblocks/sha512/selected
new file mode 100644
index 00000000..e69de29b
--- /dev/null
+++ b/nacl/crypto_hashblocks/sha512/selected
diff --git a/nacl/crypto_hashblocks/sha512/used b/nacl/crypto_hashblocks/sha512/used
new file mode 100644
index 00000000..e69de29b
--- /dev/null
+++ b/nacl/crypto_hashblocks/sha512/used
diff --git a/nacl/crypto_hashblocks/try.c b/nacl/crypto_hashblocks/try.c
new file mode 100644
index 00000000..720d2fb3
--- /dev/null
+++ b/nacl/crypto_hashblocks/try.c
@@ -0,0 +1,79 @@
1/*
2 * crypto_hashblocks/try.c version 20090118
3 * D. J. Bernstein
4 * Public domain.
5 */
6
7#include <stdlib.h>
8#include "crypto_hashblocks.h"
9
10extern unsigned char *alignedcalloc(unsigned long long);
11
12const char *primitiveimplementation = crypto_hashblocks_IMPLEMENTATION;
13
14#define MAXTEST_BYTES (10000 + crypto_hashblocks_STATEBYTES)
15#define CHECKSUM_BYTES 4096
16#define TUNE_BYTES 1536
17
18static unsigned char *h;
19static unsigned char *h2;
20static unsigned char *m;
21static unsigned char *m2;
22
23void preallocate(void)
24{
25}
26
27void allocate(void)
28{
29 h = alignedcalloc(crypto_hashblocks_STATEBYTES);
30 h2 = alignedcalloc(crypto_hashblocks_STATEBYTES);
31 m = alignedcalloc(MAXTEST_BYTES);
32 m2 = alignedcalloc(MAXTEST_BYTES);
33}
34
35void predoit(void)
36{
37}
38
39void doit(void)
40{
41 crypto_hashblocks(h,m,TUNE_BYTES);
42}
43
44char checksum[crypto_hashblocks_STATEBYTES * 2 + 1];
45
46const char *checksum_compute(void)
47{
48 long long i;
49 long long j;
50
51 for (i = 0;i < CHECKSUM_BYTES;++i) {
52 long long hlen = crypto_hashblocks_STATEBYTES;
53 long long mlen = i;
54 for (j = -16;j < 0;++j) h[j] = random();
55 for (j = hlen;j < hlen + 16;++j) h[j] = random();
56 for (j = -16;j < hlen + 16;++j) h2[j] = h[j];
57 for (j = -16;j < 0;++j) m[j] = random();
58 for (j = mlen;j < mlen + 16;++j) m[j] = random();
59 for (j = -16;j < mlen + 16;++j) m2[j] = m[j];
60 if (crypto_hashblocks(h,m,mlen) != 0) return "crypto_hashblocks returns nonzero";
61 for (j = -16;j < mlen + 16;++j) if (m2[j] != m[j]) return "crypto_hashblocks writes to input";
62 for (j = -16;j < 0;++j) if (h2[j] != h[j]) return "crypto_hashblocks writes before output";
63 for (j = hlen;j < hlen + 16;++j) if (h2[j] != h[j]) return "crypto_hashblocks writes after output";
64 for (j = 0;j < hlen;++j) m2[j] = h2[j];
65 if (crypto_hashblocks(h2,m2,mlen) != 0) return "crypto_hashblocks returns nonzero";
66 if (crypto_hashblocks(m2,m2,mlen) != 0) return "crypto_hashblocks returns nonzero";
67 for (j = 0;j < hlen;++j) if (m2[j] != h2[j]) return "crypto_hashblocks does not handle overlap";
68 for (j = 0;j < mlen;++j) m[j] ^= h[j % hlen];
69 m[mlen] = h[0];
70 }
71 if (crypto_hashblocks(h,m,CHECKSUM_BYTES) != 0) return "crypto_hashblocks returns nonzero";
72
73 for (i = 0;i < crypto_hashblocks_STATEBYTES;++i) {
74 checksum[2 * i] = "0123456789abcdef"[15 & (h[i] >> 4)];
75 checksum[2 * i + 1] = "0123456789abcdef"[15 & h[i]];
76 }
77 checksum[2 * i] = 0;
78 return 0;
79}
diff --git a/nacl/crypto_hashblocks/wrapper-empty.cpp b/nacl/crypto_hashblocks/wrapper-empty.cpp
new file mode 100644
index 00000000..e69de29b
--- /dev/null
+++ b/nacl/crypto_hashblocks/wrapper-empty.cpp